Android Security Bulletin — April 2026
Monday, 6 April 2026
- Vulnerabilities
- 2
- Critical
- 0
- High
- 0
- Zero-days
- 0
- Public exploit
- 1
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Public exploit code 1
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- Medium 6.2
All vulnerabilities 2
Medium2 ShowHide
- Medium 6.2
- Medium 4.0